You can assign company resources to employees, devices, and workdesks in the One Identity Manager. You can use different assignments types to assign company resources.
Assignments types are:
Basics for mapping company structures in One Identity Manager
Hierarchical role structure basic principles
Basic principles for assigning company resources
Managing departments, cost centers, and locations
Direct assignment
Indirect assignment
Assignment by dynamic roles
Assigning through IT Shop requests
Basics of calculating inheritance
Preparing hierarchical roles for company resource assignments
One Identity Manager users for organizations
Basic data for structuring departments, cost centers, and locations
Editing departments
Working with dynamic roles
General master data for a department
Contact data for departments
Functional area and risk assessment
Editing cost centers
Editing locations
General master data for a location
Location address information
Configuring a location's network
Directions to location
Functional area and risk assessment
Assigning employees, devices, and workdesks to departments, cost centers, and locations
Assigning company resources to departments, cost centers, and locations
Setting up IT operating data
Additional tasks for managing departments, cost centers, and locations
Creating dynamic roles for departments, cost centers, and locations
Assign organizations
Specifying inheritance exclusion for roles
Reports about departments, cost centers, and locations
Editing dynamic roles
Conditions for dynamic roles
Testing a condition of a dynamic role
Calculating role memberships
Additional tasks for dynamic roles
Employee administration
One Identity Manager users for employee administration
Basic data for employee master data
Entering employee master data
Managing devices and workdesks
General employee master data
Organizational employee master data
Address data
Miscellaneous employee master data
Employee's central user account
Employee's central password
Employee's default email address
Mapping multiple employee identities
Disabling and deleting employees
Temporarily deactivating employees
Permanently deactivating employees
Deferred deletion of employees
Deleting all employee related data
Password policies for employees
Predefined password policies
Using password policies
Limited access to One Identity Manager
Assigning company resources to employees
Changing the password policy for the password columns
Assigning password policies to departments, cost centers, locations, and business roles
Editing password policies
Custom scripts for password requirements
Defining the excluded list for passwords
Checking a password
Testing password generation
Informing employees about expiring passwords
Displaying locked employees and system users
Assigning employees to departments, cost centers, and locations
Assigning employees to business roles
Adding employees to IT Shop custom nodes
Assigning application roles to employees
Assigning resources directly to employees
Assigning software directly to employees
Assigning system roles directly to employees
Assigning subscribable reports directly to employees
Displaying the origin of an employee's roles and entitlements
Analyzing role memberships and employee assignments
Additional tasks for managing employees
Employee overview
Manually assigning user accounts to employees
Entering calls for an employee
Assigning extended properties
Displaying and deleting employees' Webauthn security keys
Setting a secret password question
Mutual aid
Determining an employee’s language
Determining an employee's working hours
Employee reports
Basic data for device admin
Setting up a device
Assigning company resources to devices
Additional tasks for managing devices
How to set up workdesks
Managing resources
General master data for a workdesk
Workdesk location information
Additional information about a workdesk
Assigning company resources to workdesks
Assigning workdesks to departments, cost centers, and locations
Assigning workdesks to business roles
Assigning software directly to workdesks
Assigning system roles directly to workdesks
Additional tasks for managing workdesks
Asset data for devices
One Identity Manager users for managing resources
Basic data for resources
Editing resources
Assigning resources to employees
Setting up extended properties
Assigning resources to departments, cost centers, and locations
Assigning resources to business roles
Assigning resources directly to employees
Adding resources to the IT Shop
Adding resources in system roles
Additional tasks for managing resources
Editing multi-request resources
Assigning multi-request resources to employees
Reports about resources
One Identity Manager users for managing extended properties
Create property groups
Edit extended properties
Additional tasks for managing extended properties
Configuration parameters for managing departments, cost centers, and locations
Effective configuration parameters for setting up employees
Configuration parameters for managing devices and workdesks
Basic principles for assigning company resources
Direct assignment
Direct assignment of company resources results from the assignment of a company resource to an employee, device, or workdesk, for example. Direct assignment of company resources makes it easier to react to special requirements.
Figure 5: Schema of a direct assignment based on the example of an employee
Indirect assignment
In the case of indirect assignment of company resources, employees, devices, and workdesks are arranged in departments, cost centers, locations, business roles, or application roles. The total of assigned company resources for an employee, device, or workdesk is calculated from the position within the hierarchies, the direction of inheritance (top-down or bottom-up) and the company resources assigned to these roles. In the Indirect assignment methods a difference between primary and secondary assignment is taken into account.
Figure 6: Schema of an indirect assignment based on the employee example
Related topics
Secondary assignment
You make a secondary assignment by classifying an employee, a device, or a workdesk within a role hierarchy. Secondary assignment is the default method for assigning and inheriting company resources through roles. In the role classes
Figure 7: Secondary assignment inheritance schema
